[DIFF-INFORMED] Java: TrustBoundaryViolation

d10c · d10c · commit c0c8902a0b30 · 2025-07-17T14:29:59.000+02:00
https://github.com/d10c/codeql/blob/d10c/diff-informed-phase-3/java/ql/src/Security/CWE/CWE-501/TrustBoundaryViolation.ql#L18
diff --git a/java/ql/lib/semmle/code/java/security/TrustBoundaryViolationQuery.qll b/java/ql/lib/semmle/code/java/security/TrustBoundaryViolationQuery.qll
@@ -62,6 +62,8 @@ module TrustBoundaryConfig implements DataFlow::ConfigSig {
   }
 
   predicate isSink(DataFlow::Node sink) { sink instanceof TrustBoundaryViolationSink }
+
+  predicate observeDiffInformedIncrementalMode() { any() }
 }
 
 /**

Original file line number	Diff line number	Diff line change
`@@ -62,6 +62,8 @@ module TrustBoundaryConfig implements DataFlow::ConfigSig {`
`62`	`62`	`}`
`63`	`63`
`64`	`64`	`predicate isSink(DataFlow::Node sink) { sink instanceof TrustBoundaryViolationSink }`
	`65`	`+`
	`66`	`+ predicate observeDiffInformedIncrementalMode() { any() }`
`65`	`67`	`}`
`66`	`68`
`67`	`69`	`/**`